Re: [Endymail] spam versus cleartext

Pete Resnick <presnick@qti.qualcomm.com> Sun, 07 September 2014 13:21 UTC

Return-Path: <presnick@qti.qualcomm.com>
X-Original-To: endymail@ietfa.amsl.com
Delivered-To: endymail@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 826EA1A035F for <endymail@ietfa.amsl.com>; Sun, 7 Sep 2014 06:21:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.653
X-Spam-Level:
X-Spam-Status: No, score=-8.653 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.652, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Swq2oJkMYM8a for <endymail@ietfa.amsl.com>; Sun, 7 Sep 2014 06:21:42 -0700 (PDT)
Received: from sabertooth01.qualcomm.com (sabertooth01.qualcomm.com [65.197.215.72]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF5181A033D for <endymail@ietf.org>; Sun, 7 Sep 2014 06:21:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1410096102; x=1441632102; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=F7SJvhuNYN1nlc4YPPzTERb/yEimqV3rLPTFXOKCzGo=; b=jsBUl6riCpG5XnoUx2+cOp3LVhFL88hNTLQX0wGIBnZbFN/vFWAdR0x6 /KMWDcnaGYWmNTKiapFbrptVaL9CXmUx2OGL596h/ojZlKYNTpUdkx9M8 SiA5k6SoMvVpMyu+ZHUdqjJWUrAUeLjxYbb4Ri/1kDtwHwGghayv60G0S U=;
X-IronPort-AV: E=McAfee;i="5600,1067,7553"; a="73651729"
Received: from ironmsg03-r.qualcomm.com ([172.30.46.17]) by sabertooth01.qualcomm.com with ESMTP; 07 Sep 2014 06:21:42 -0700
X-IronPort-AV: E=Sophos;i="5.04,482,1406617200"; d="scan'208";a="745967311"
Received: from nasanexhc04.na.qualcomm.com ([172.30.48.17]) by Ironmsg03-R.qualcomm.com with ESMTP/TLS/RC4-SHA; 07 Sep 2014 06:21:42 -0700
Received: from presnick-mac.local (172.30.48.1) by qcmail1.qualcomm.com (172.30.48.17) with Microsoft SMTP Server (TLS) id 14.3.181.6; Sun, 7 Sep 2014 06:21:41 -0700
Message-ID: <540C5BE1.6010405@qti.qualcomm.com>
Date: Sun, 7 Sep 2014 10:21:37 -0300
From: Pete Resnick <presnick@qti.qualcomm.com>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.7; en-US; rv:1.9.1.9) Gecko/20100630 Eudora/3.0.4
MIME-Version: 1.0
To: Eliot Lear <lear@cisco.com>
References: <540AABF8.8000605@cisco.com>
In-Reply-To: <540AABF8.8000605@cisco.com>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [172.30.48.1]
Archived-At: http://mailarchive.ietf.org/arch/msg/endymail/Hkv0vfehbsZhsiW1SEcsZQ9SLyE
Cc: endymail@ietf.org
Subject: Re: [Endymail] spam versus cleartext
X-BeenThere: endymail@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <endymail.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/endymail>, <mailto:endymail-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/endymail/>
List-Post: <mailto:endymail@ietf.org>
List-Help: <mailto:endymail-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/endymail>, <mailto:endymail-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 07 Sep 2014 13:21:44 -0000

On 9/6/14 3:38 AM, Eliot Lear wrote:
> In the early days fo perpass we had lengthy discussions about the
> tension between privacy and ability of security systems to reduce spam.
> Below is an article from a gentleman who used to work at Google, which I
> thought this group might find interesting.
>
> https://moderncrypto.org/mail-archive/messaging/2014/000780.html
>    

Along similar lines to what John Levine said,: Obviously doing e2e 
crypto gets you signatures. Since we are blue-skying here, I think it is 
perfectly plausible to say, "If you want to send me e2e encrypted 
messages, you also have to send me signed messages, and you don't or 
your signature is not in my contacts list already, your encrypted mail 
is going to bounce." I think it's possible that in the fullness of time, 
many users go to a contact-list model of email (a la IM) where the mail 
simply bounces unless it has a signature that is already in the contacts 
list.

pr

-- 
Pete Resnick<http://www.qualcomm.com/~presnick/>
Qualcomm Technologies, Inc. - +1 (858)651-4478